Add necessary sepolicy. Log and reason are added in review comment move sysfs out from legacy setting Bug: 262633502 Bug: 263049105 Bug: 262794577 Bug: 262794578 Bug: 262794634 Test: video playback SELinuxTest#scanBugreport SELinuxTest#scanAvcDeniedLogRightAfterReboot Change-Id: I240f3fc4672a0d3133699f76a808573e172d23f2
25 lines
1.2 KiB
Text
25 lines
1.2 KiB
Text
# b/261933169
|
|
dontaudit dumpstate con_monitor_app:process { signal };
|
|
dontaudit dumpstate default_android_service:service_manager { find };
|
|
dontaudit dumpstate euiccpixel_app:process { signal };
|
|
dontaudit dumpstate fuse:dir { search };
|
|
dontaudit dumpstate hal_audio_default:binder { call };
|
|
dontaudit dumpstate hal_confirmationui_default:binder { call };
|
|
dontaudit dumpstate hal_health_default:binder { call };
|
|
dontaudit dumpstate modem_efs_file:dir { getattr };
|
|
dontaudit dumpstate modem_img_file:dir { getattr };
|
|
dontaudit dumpstate modem_img_file:filesystem { getattr };
|
|
dontaudit dumpstate modem_userdata_file:dir { getattr };
|
|
dontaudit dumpstate persist_file:dir { getattr };
|
|
dontaudit dumpstate sysfs_scsi_devices_0000:file { getattr };
|
|
dontaudit dumpstate sysfs_scsi_devices_0000:file { open };
|
|
dontaudit dumpstate sysfs_scsi_devices_0000:file { read };
|
|
dontaudit dumpstate system_data_file:dir { open };
|
|
dontaudit dumpstate system_data_file:dir { read };
|
|
dontaudit dumpstate vold:binder { call };
|
|
# b/262633248
|
|
dontaudit dumpstate mediacodec_google:process { signal };
|
|
dontaudit dumpstate rild:binder { call };
|
|
# b/263048776
|
|
dontaudit dumpstate hal_usb_impl:binder { call };
|
|
dontaudit dumpstate hal_uwb_default:binder { call };
|